CVE-2011-1070

EUVD-2011-1085
v86d before 0.1.10 do not verify if received netlink messages are sent by the kernel. This could allow unprivileged users to manipulate the video mode and potentially other consequences.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 32%
Affected Products (NVD)
VendorProductVersion
v86d_projectv86d
𝑥
< 0.1.10
debiandebian_linux
8.0
debiandebian_linux
9.0
debiandebian_linux
10.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
v86d
bullseye
0.1.10-1
fixed
sid
0.1.10-5
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
v86d
hardy
dne
lucid
ignored
maverick
ignored
natty
ignored
oneiric
not-affected
precise
not-affected
quantal
not-affected
raring
not-affected
saucy
not-affected
Common Weakness Enumeration
References
https://access.redhat.com/security/cve/cve-2011-1070
https://seclists.org/oss-sec/2011/q1/315
https://security-tracker.debian.org/tracker/CVE-2011-1070
https://access.redhat.com/security/cve/cve-2011-1070
https://seclists.org/oss-sec/2011/q1/315
https://security-tracker.debian.org/tracker/CVE-2011-1070